Privacy Policy

1. Introduction

This Privacy Policy ("Policy") applies to all personal information collected by idxtar ("We", "Us", "Our", "Platform") from users ("You", "Your", "Member", "Player") who access or use our online gaming services. We recognize that when you entrust us with your personal information, you expect it to be handled responsibly, securely, and transparently.

This Policy covers what personal data we collect, why we collect it, how we use it, who we share it with, how we protect it, how long we retain it, and what rights you have regarding your data. It applies to all services offered on the idxtar Platform, including casino games, live dealer tables, sports betting, lottery draws including togel (Indonesia's traditional numbers lottery), and promotional campaigns.

Please read this Policy carefully alongside our Terms & Conditions before registering an account or using any services on idxtar. If you do not agree with any part of this Policy, you should not use our Platform.

2. Data Controller

idxtar, operating at https://idxtar.cam, is the data controller responsible for the personal information you provide to us and the data we collect about your use of the Platform. As data controller, we determine the purposes and means of processing your personal data in accordance with applicable data protection laws and international best practices.

For any questions, concerns, or requests related to this Privacy Policy or the handling of your personal data, you may contact our Data Protection Officer at [email protected]. We will respond to all privacy-related inquiries within 7 business days.

3. Data We Collect

idxtar collects several categories of personal information to provide, maintain, and improve our gaming services. The types of data we collect include:

3.1 Account Registration Data

When you create an idxtar account, we collect the following information:

• Full legal name (as it appears on your government-issued ID)
• Date of birth (to verify you are 21 years of age or older)
• Email address
• Indonesian mobile phone number
• Username and password (password is stored in encrypted form only)
• Account security questions and answers
• Preferred communication language

3.2 Identity Verification (KYC) Data

To comply with regulatory requirements and prevent fraud, we collect identity verification documents including:

• Government-issued photo identification (Indonesian National Identity Card / KTP, or passport)
• Proof of residential address (utility bill, bank statement, or government correspondence dated within the last 3 months)
• Photograph of payment method (bank card or e-wallet screenshot) matching your registered payment details
• Selfie photograph holding your ID document for facial verification purposes

All submitted documents are encrypted during transmission and storage. We do not store full credit card numbers or CVV codes. Only the last 4 digits of card numbers are retained for identification purposes.

3.3 Financial Transaction Data

To process deposits and withdrawals, we record the following financial information:

• Bank account numbers and bank names (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata)
• E-wallet account identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja registered phone numbers or account IDs)
• Deposit and withdrawal amounts, timestamps, and transaction reference numbers
• Payment method used for each transaction
• Transaction status (pending, completed, failed, cancelled)

We do not store sensitive authentication credentials such as banking passwords, OTP codes, or e-wallet PINs. All payment processing is conducted through secure, PCI-DSS compliant payment gateways.

3.4 Gaming Activity Data

To maintain your gaming history and provide personalized service, we collect data about your gaming activity including:

• Games played (slot titles, live dealer tables, sports events bet on, togel markets selected)
• Bet amounts, win/loss outcomes, and net results per session
• Bonus claims, wagering progress, and bonus funds balance
• Session duration, login times, and logout times
• Responsible gaming settings (deposit limits, loss limits, session time reminders, self-exclusion periods)
• Customer support interactions and chat transcripts

3.5 Technical and Device Data

When you access idxtar, we automatically collect certain technical information to ensure platform security and optimize your experience:

• IP address and approximate geographic location (city-level)
• Device type, operating system, and browser version
• Screen resolution and device language settings
• Referral source (which website or link brought you to idxtar)
• Pages visited, features used, and time spent on each page
• Cookies and similar tracking technologies (see Section 10 for details)

3.6 Communications Data

When you communicate with idxtar through support channels, we collect and store:

• Email correspondence and support ticket content
• Live chat transcripts and timestamps
• Feedback survey responses and satisfaction ratings
• Complaint details and resolution notes

4. How We Use Your Data

idxtar uses the personal information we collect for the following purposes:

4.1 Account Management and Service Delivery

• Create and maintain your member account
• Process your deposits and withdrawals in Indonesian Rupiah (IDR / Rp)
• Verify your identity and age (21+ requirement) through KYC procedures
• Provide access to casino games, live dealers, sports betting, and togel lottery draws
• Track your gaming activity, wins, losses, and bonus status
• Facilitate customer support inquiries and resolve technical issues

4.2 Legal Compliance and Fraud Prevention

• Comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations
• Detect and prevent fraudulent activity, bonus abuse, and terms violations
• Monitor for duplicate accounts and underage gambling attempts
• Respond to legal requests from regulatory authorities or law enforcement agencies
• Maintain records for audit and compliance purposes

4.3 Responsible Gaming and Player Protection

• Enforce responsible gaming limits (deposit limits, loss limits, session reminders)
• Process self-exclusion requests and cooling-off periods
• Identify patterns of problematic gambling behavior and offer intervention support
• Ensure compliance with age restrictions and geographic eligibility requirements

4.4 Marketing and Personalization

• Send promotional offers, bonus announcements, and VIP program updates via email or SMS (only if you have opted in)
• Personalize game recommendations based on your gaming preferences
• Provide tailored customer service based on your account history
• Conduct satisfaction surveys to improve our services

You may opt out of marketing communications at any time by clicking the "Unsubscribe" link in any promotional email or by adjusting your communication preferences in your account settings. Opting out of marketing does not affect transactional communications such as withdrawal confirmations or account security alerts.

4.5 Platform Improvement and Analytics

• Analyze user behavior to improve website navigation and interface design
• Monitor platform performance, uptime, and technical errors
• Test new features and game offerings with selected user groups
• Generate aggregated, anonymized statistical reports for internal business purposes

5. Legal Basis for Processing

idxtar processes your personal data under the following legal grounds:

• Contractual Necessity: Processing is necessary to fulfill our obligations under the Terms & Conditions you agreed to when registering your account. This includes account creation, payment processing, game provision, and customer support.
• Legal Obligation: We are required by applicable gaming regulations to verify your identity, age, and payment methods, and to maintain records for AML and audit purposes.
• Legitimate Interests: We process data to detect fraud, prevent abuse, improve our services, and maintain platform security. These interests are balanced against your privacy rights and do not override your fundamental rights.
• Consent: For marketing communications and non-essential cookies, we rely on your explicit consent, which you can withdraw at any time without affecting the lawfulness of processing based on consent before its withdrawal.

6. Data Sharing and Disclosure

idxtar does not sell, rent, or trade your personal information to third parties for their marketing purposes. We share your data only in the following limited circumstances:

6.1 Service Providers

We engage trusted third-party service providers to perform functions on our behalf, including:

• Payment Processors: Banks and e-wallet providers (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, LinkAja) to facilitate deposits and withdrawals
• Game Providers: Software studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, and Pocket Games Soft to deliver casino games and live dealer experiences
• Identity Verification Services: Third-party KYC providers that assist with document verification and fraud detection
• Cloud Hosting and IT Infrastructure: Data centers and hosting providers that store and manage platform data securely
• Customer Support Tools: Live chat platforms and ticketing systems used to provide support services

All service providers are contractually bound to process your data only for the specified purposes and in accordance with our data protection standards. They are prohibited from using your information for their own purposes.

6.2 Legal and Regulatory Authorities

We may disclose personal information to law enforcement agencies, regulators, courts, or other government authorities when:

• Required by law, legal process, or valid government request
• Necessary to investigate suspected criminal activity, fraud, or money laundering
• Needed to enforce our Terms & Conditions or protect our rights and property
• Necessary to protect the safety of our users or the public

6.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred to the acquiring entity as part of the transaction. We will notify you via email and/or prominent notice on the Platform before your data is transferred and becomes subject to a different privacy policy.

6.4 With Your Consent

We may share your information with third parties when you have given explicit consent to such sharing, for example when participating in a third-party promotion or tournament hosted on idxtar.

7. Data Security

idxtar implements industry-standard security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Our security infrastructure includes:

• 256-bit SSL Encryption: All data transmitted between your device and our servers is encrypted using bank-grade SSL/TLS protocols
• Secure Data Centers: Personal information is stored in ISO 27001 certified data centers with 24/7 physical security, environmental controls, and redundant backup systems
• Access Controls: Personal data is accessible only to authorized idxtar personnel who require access to perform their job functions. All access is logged and monitored
• Password Hashing: User passwords are stored using strong one-way cryptographic hash algorithms. idxtar staff cannot view your plaintext password
• Two-Factor Authentication: Optional 2FA is available for enhanced account security
• Regular Security Audits: Independent security firms conduct penetration testing and vulnerability assessments of our platform
• Fraud Detection Systems: Automated monitoring identifies suspicious login attempts, unusual betting patterns, and potential account compromises

While we employ robust security measures, no system is completely secure. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately if you suspect unauthorized access to your account. Please see our Terms & Conditions for more on account security obligations.

8. Data Retention

idxtar retains your personal information for as long as necessary to fulfill the purposes outlined in this Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Account Data: Retained for the duration of your active membership and for 7 years after account closure to comply with financial record-keeping and AML regulations
• Transaction Records: Retained for 10 years from the date of transaction for audit, tax, and regulatory compliance purposes
• KYC Documents: Retained for 7 years after account closure or the end of the business relationship, as required by AML laws
• Gaming Activity Logs: Retained for 5 years to facilitate dispute resolution and responsible gaming monitoring
• Marketing Opt-Out Records: Retained indefinitely to ensure we do not contact you again after you have unsubscribed
• Support Communications: Retained for 3 years for quality assurance and training purposes

After the applicable retention period expires, personal data is securely deleted or anonymized such that it can no longer be associated with you. Anonymized data may be retained for statistical analysis and business intelligence purposes.

9. Your Rights

Under applicable data protection laws, you have the following rights regarding your personal information:

9.1 Right of Access

You have the right to request a copy of the personal information idxtar holds about you. You can access most of your account information directly through your account dashboard. For a comprehensive data export, contact [email protected] with your request. We will provide the data in a structured, commonly used, machine-readable format within 30 days.

9.2 Right to Rectification

You have the right to correct inaccurate or incomplete personal information. You can update most account details directly in your account settings. For changes requiring verification (such as bank account details), please contact customer support.

9.3 Right to Erasure

You have the right to request deletion of your personal data under certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected. Note that we may be required to retain certain information for legal compliance (e.g., transaction records for tax purposes). To request account deletion, contact [email protected].

9.4 Right to Restriction of Processing

You may request that we restrict processing of your personal data in certain situations, such as when you contest the accuracy of the data or object to processing. During the restriction period, we will store the data but not actively process it except with your consent or for legal claims.

9.5 Right to Data Portability

You have the right to receive your personal data in a portable format and to transmit it to another service provider where technically feasible. We will provide your data in CSV or JSON format upon request.

9.6 Right to Object

You have the right to object to processing of your personal data when we rely on legitimate interests as the legal basis. You may also object to direct marketing at any time by clicking "Unsubscribe" in marketing emails or adjusting your preferences in account settings.

9.7 Right to Withdraw Consent

Where processing is based on your consent (such as marketing communications), you have the right to withdraw consent at any time. Withdrawal does not affect the lawfulness of processing based on consent before withdrawal.

10. Cookies & Tracking Technologies

idxtar uses cookies, web beacons, and similar tracking technologies to enhance your experience, analyze platform usage, and deliver personalized content. A cookie is a small text file stored on your device that allows us to recognize your browser and remember certain information about your visit.

10.1 Types of Cookies We Use

• Essential Cookies: Necessary for the Platform to function. These enable core features such as account login, session management, and secure payment processing. These cookies cannot be disabled.
• Performance Cookies: Collect anonymous information about how visitors use idxtar, such as which pages are visited most often and whether users encounter error messages. This helps us improve platform performance.
• Functional Cookies: Remember your preferences (language selection, display settings) and provide enhanced features such as live chat support.
• Advertising Cookies: Track your browsing habits to deliver relevant promotional offers. These cookies are set with your consent and can be disabled through your browser settings or our cookie consent tool.

10.2 Managing Cookies

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies if you prefer. However, disabling cookies may prevent you from accessing certain features of the idxtar Platform, and some services may not function properly. To manage cookies, access your browser settings or use the cookie consent banner displayed on your first visit.

11. International Data Transfers

idxtar operates as an international online gaming platform and may transfer your personal data to servers located outside Indonesia for processing and storage purposes. When we transfer data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable data protection laws.

These safeguards include using data centers that comply with internationally recognized security standards (ISO 27001, SOC 2), implementing standard contractual clauses approved by regulatory authorities, and ensuring all third-party processors adhere to equivalent data protection standards. Your data may be processed in jurisdictions with different data protection laws than Indonesia, but we remain committed to protecting your privacy rights regardless of where data is processed.

12. Protection of Minors

idxtar strictly prohibits access by individuals under 21 years of age. We do not knowingly collect personal information from anyone under the age of 21. Our age verification procedures are designed to prevent underage registration, and we conduct ongoing monitoring to detect and close any accounts found to be held by minors.

If we become aware that we have inadvertently collected personal information from someone under 21 years of age, we will immediately delete that information from our systems and permanently close the associated account. All funds deposited by an underage individual will be confiscated in accordance with responsible gaming regulations and may be donated to problem gambling prevention organizations.

If you are a parent or guardian and believe your child under 21 has provided personal information to idxtar, please contact us immediately at [email protected] so we can take appropriate action.

13. Changes to This Privacy Policy

idxtar reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When material changes are made, we will notify you by:

• Sending an email notification to your registered email address at least 14 days before the changes take effect
• Displaying a prominent notice on the Platform homepage and login screen
• Updating the "Effective Date" at the top of this document

Your continued use of the idxtar Platform after the effective date of any changes constitutes your acceptance of the revised Privacy Policy. If you do not agree with the updated policy, you should discontinue use of the Platform and request account closure before the effective date.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information. The most current version will always be available at https://idxtar.cam/privacy-policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal information, please contact our Data Protection Team:

When contacting us about privacy matters, please include your registered email address and a detailed description of your inquiry or request. We are committed to resolving all privacy concerns promptly and transparently in accordance with applicable data protection laws.